4 ms·

The default OpenBSD ntpd config pings google, cloudflare, and quad9 by default. edit: looks like it only queries cloudflare.

• zdw 6y ago
  Pervasive advertising surveillance is quite a bit different from ntp queries for "what time is it?" and confirming the time with HTTPS servers. Having multiple sources improves NTP and prevents a single distorted source from breaking things, and large companies have good security reasons to tell the truth about the time.
  • deleted 6y ago
    [deleted]
  • throwawayboise 6y ago
    And it's clear what servers it's querying, unlike say "pool.ntp.org"
  • lmohseni 6y ago
    That's interesting, and I completely agree. However, my comment was about whether the default OpenBSD install sends any data to any private US companies. NTP queries are a form of data :). Also, if it ever became profitable for some reason to give incorrect NTP results, then I doubt Google et al would continue to do so.
    • owenmarshall 6y ago
      OpenBSD doesn’t send NTP queries to those sources - with the exception of Cloudflare’s NTP pool. It uses TLS timestamps to constrain the possible time values. This prevents spoofed NTP packets from changing the time. https://man.openbsd.org/ntpd.conf.5 https://man.openbsd.org/ntpd.conf.5 https://github.com/openbsd/src/blob/master/etc/ntpd.conf https://github.com/openbsd/src/blob/master/etc/ntpd.conf